IP addresses

11,045 IP addresses reported in published sources on North Korean (DPRK) cyber operations, ordered by value, 200 to a page. This is page 45 of 56, from 45.76.99.56 to 5.161.182.109. Each value links to its own page, which carries every source that reported it and the text around it. Other types are listed in the browse directory.

ValueCampaignFiled underSources
45.76.99.56 Kimsuky 1
45.77.123.18 DPRK (cluster unattributed) 1
45.77.179.89 Contagious InterviewAPT38 2
45.77.71.42 IT Worker Fraud 2
45.77.71.50 Kimsuky 1
45.79.19.196 Lazarus Group 1
45.79.73.17 IT Worker Fraud 1
45.79.75.70 IT Worker Fraud 1
45.8.106.59 IT Worker Fraud 1
45.8.146.93 Contagious InterviewLazarus Group 4
45.8.22.144 Contagious Interview 2
45.8.22.52 Contagious Interview 1
45.8.25.82 DPRK (cluster unattributed) 1
45.8.68.79 DPRK (cluster unattributed) 1
45.8.68.80 DPRK (cluster unattributed) 1
45.81.115.86 IT Worker FraudContagious Interview 1
45.82.250.186 Lazarus Group 1
45.82.255.2 Contagious Interview 1
45.83.140.231 Contagious Interview 1
45.83.220.216 DPRK (cluster unattributed) 1
45.85.18.37 IT Worker Fraud 1
45.86.202.216 DPRK (cluster unattributed) 1
45.86.202.224 APT38 1
45.86.202.4 DPRK (cluster unattributed) 1
45.86.208.162 Contagious InterviewIT Worker FraudAPT38 7
45.86.208.35 IT Worker Fraud 1
45.86.208.36 IT Worker Fraud 1
45.86.208.37 IT Worker Fraud 1
45.86.231.67 Lazarus GroupContagious Interview 1
45.87.153.79 KimsukyDPRK (cluster unattributed) 2
45.89.53.54 Lazarus GroupKimsukyAPT37KonniContagious Interview 3
45.89.53.59 Lazarus GroupContagious Interview 2
45.9.150.36 Contagious Interview 1
45.9.251.14 Lazarus GroupAndariel 1
45.9.74.36 Contagious Interview 1
45.90.210.116 IT Worker Fraud 1
45.90.210.12 IT Worker Fraud 1
45.93.201.62 Contagious Interview 1
45.95.11.52 KimsukyDPRK (cluster unattributed) 2
45.95.186.232 Kimsuky 3
45.95.235.56 Contagious Interview 1
45.95.243.104 DPRK (cluster unattributed) 1
45.95.243.155 DPRK (cluster unattributed) 1
46.10.183.56 IT Worker Fraud 1
46.10.199.90 IT Worker Fraud 1
46.100.250.10 APT38 1
46.101.159.153 IT Worker Fraud 1
46.101.166.19 Lazarus Group 1
46.101.215.222 IT Worker Fraud 1
46.101.36.144 IT Worker Fraud 1
46.101.6.187 IT Worker Fraud 1
46.105.47.148 Contagious Interview 1
46.105.57.169 Lazarus Group 1
46.107.230.122 IT Worker Fraud 1
46.107.230.156 IT Worker Fraud 1
46.14.68.202 Lazarus Group 1
46.141.30.158 IT Worker Fraud 1
46.151.150.6 IT Worker Fraud 1
46.16.62.238 APT38Lazarus Group 1
46.161.192.185 IT Worker Fraud 1
46.166.167.180 IT Worker Fraud 1
46.166.167.181 IT Worker Fraud 1
46.166.167.182 IT Worker Fraud 1
46.17.175.29 KimsukyKonni 1
46.170.26.42 IT Worker Fraud 1
46.172.223.34 IT Worker Fraud 1
46.172.225.184 IT Worker Fraud 1
46.172.66.131 IT Worker Fraud 1
46.172.75.51 IT Worker Fraud 1
46.172.76.43 IT Worker Fraud 1
46.174.233.22 IT Worker Fraud 1
46.174.235.235 IT Worker Fraud 1
46.174.235.37 IT Worker Fraud 1
46.175.70.69 IT Worker Fraud 1
46.183.221.109 Lazarus Group 2
46.19.138.51 IT Worker Fraud 1
46.19.141.98 IT Worker Fraud 1
46.202.158.9 Kimsuky 1
46.202.196.24 Lazarus GroupAPT38 1
46.21.147.161 Lazarus Group 1
46.214.153.223 IT Worker Fraud 1
46.214.93.158 IT Worker Fraud 1
46.221.50.246 IT Worker Fraud 1
46.226.108.171 DPRK (cluster unattributed) 1
46.227.36.1 IT Worker Fraud 1
46.227.37.21 IT Worker Fraud 1
46.227.37.61 IT Worker Fraud 1
46.227.38.1 IT Worker Fraud 1
46.229.205.18 IT Worker Fraud 1
46.238.230.4 IT Worker Fraud 1
46.240.132.22 IT Worker Fraud 1
46.243.189.101 Contagious Interview 1
46.246.117.29 IT Worker Fraud 1
46.252.150.82 Kimsuky 1
46.252.59.171 IT Worker Fraud 1
46.28.70.102 Contagious Interview 1
46.35.249.189 IT Worker Fraud 1
46.38.156.25 EtherHiding / UNC5342DPRK (cluster unattributed) 1
46.4.112.56 Konni 1
46.4.168.53 IT Worker Fraud 1
46.4.198.55 Contagious Interview 2
46.4.224.205 Lazarus GroupContagious Interview 2
46.41.134.12 IT Worker Fraud 1
46.44.251.52 Kimsuky 1
46.55.161.113 IT Worker Fraud 1
46.55.25.191 IT Worker Fraud 1
46.63.81.195 IT Worker Fraud 1
46.8.237.66 Contagious Interview 1
46.98.191.242 IT Worker Fraud 1
46.98.196.19 IT Worker Fraud 1
46.98.197.46 IT Worker Fraud 1
46.98.99.128 IT Worker Fraud 1
46.99.161.122 IT Worker Fraud 1
47.100.14.22 IT Worker Fraud 1
47.102.38.154 Contagious Interview 1
47.103.206.233 Kimsuky 1
47.103.219.77 Contagious Interview 1
47.103.45.174 Contagious Interview 1
47.103.7.31 IT Worker Fraud 1
47.104.16.8 IT Worker Fraud 1
47.112.102.20 IT Worker Fraud 1
47.115.149.82 IT Worker Fraud 1
47.115.156.64 IT Worker Fraud 1
47.115.6.196 IT Worker Fraud 1
47.119.168.135 IT Worker Fraud 1
47.147.126.25 Contagious Interview 1
47.157.38.92 Contagious Interview 1
47.184.181.61 IT Worker Fraud 1
47.206.238.131 IT Worker Fraud 1
47.206.4.145 Lazarus Group 2
47.220.151.116 IT Worker FraudContagious Interview 1
47.236.172.160 Kimsuky 1
47.241.61.60 IT Worker Fraud 1
47.242.5.82 IT Worker Fraud 1
47.242.6.186 IT Worker Fraud 1
47.242.86.153 IT Worker Fraud 1
47.243.182.242 IT Worker Fraud 1
47.243.229.22 Contagious Interview 1
47.243.74.226 IT Worker Fraud 1
47.245.56.19 IT Worker Fraud 1
47.251.12.225 IT Worker Fraud 1
47.254.75.151 IT Worker Fraud 1
47.254.90.125 IT Worker Fraud 1
47.56.69.11 IT Worker Fraud 1
47.57.188.208 IT Worker Fraud 1
47.74.152.29 IT Worker Fraud 1
47.75.113.110 IT Worker Fraud 1
47.75.90.57 IT Worker Fraud 1
47.88.4.13 IT Worker Fraud 1
47.88.7.18 IT Worker Fraud 1
47.89.153.213 IT Worker Fraud 1
47.90.132.228 IT Worker Fraud 1
47.91.137.211 IT Worker Fraud 1
47.91.56.21 Lazarus GroupKimsuky 1
47.92.113.71 IT Worker Fraud 1
47.94.192.25 IT Worker Fraud 1
47.96.134.44 IT Worker Fraud 1
47.96.86.81 Contagious Interview 1
49.0.2.243 IT Worker Fraud 1
49.0.34.50 IT Worker Fraud 1
49.0.39.10 IT Worker Fraud 1
49.0.81.219 IT Worker Fraud 1
49.1.1.1 Contagious Interview 1
49.1.1.52 Contagious Interview 1
49.1.234.75 Kimsuky 1
49.1.238.247 Kimsuky 1
49.1.9.16 Contagious Interview 1
49.12.2.178 IT Worker Fraud 1
49.12.210.240 IT Worker Fraud 1
49.12.42.56 Contagious Interview 1
49.145.111.7 Contagious Interview 1
49.156.152.193 IT Worker Fraud 1
49.156.33.154 IT Worker Fraud 1
49.156.38.126 IT Worker Fraud 1
49.156.39.162 IT Worker Fraud 1
49.156.42.186 IT Worker Fraud 1
49.156.42.188 IT Worker Fraud 1
49.156.42.210 IT Worker Fraud 1
49.156.47.162 IT Worker Fraud 1
49.231.0.178 IT Worker Fraud 1
49.231.140.122 IT Worker Fraud 1
49.231.174.182 IT Worker Fraud 1
49.231.200.212 IT Worker Fraud 1
49.232.160.71 IT Worker Fraud 1
49.239.189.45 Andariel 2
49.247.9.177 Lazarus Group 1
49.48.34.223 IT Worker Fraud 1
49.51.207.213 IT Worker Fraud 1
49.75.59.242 IT Worker Fraud 1
5.1.104.66 IT Worker Fraud 1
5.101.120.208 IT Worker Fraud 1
5.101.86.83 EtherHiding 1
5.105.0.135 IT Worker Fraud 1
5.105.1.86 IT Worker Fraud 1
5.133.9.252 Lazarus GroupAPT38 1
5.134.119.142 APT37Lazarus Group 1
5.135.24.186 IT Worker Fraud 1
5.152.86.46 IT Worker Fraud 1
5.153.140.180 IT Worker Fraud 1
5.161.182.109 Konni 1
Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. Compromised packages and repositories name victims. See the sourcing methodology.